CVE-2015-5241

Description

After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users to redirect the browser to an unintended web page in Apache jUDDI 3.1.2, 3.1.3, 3.1.4, and 3.1.5 when utilizing the portlets based user interface also known as Pluto, jUDDI Portal, UDDI Portal or uddi-console. User session data, credentials, and auth tokens are cleared before the redirect.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

2.557

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2015-5241 are fixed in Apache-juddi-client 3.2.0	Windows
Vulnerabilities CVE-2015-5241 are fixed in Apache-juddi-client for Linux 3.2.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234